What is CVE-2026-76673?

CVE-2026-76673 is a critical-severity vulnerability. CVSS score: 9.8/10. Published 2026-09-15.

How severe is CVE-2026-76673?

Critical severity. CVSS v3 base score is 9.8 out of 10.

CVE-2026-76673

CVE-2026-76673

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

References

security-alert@hpe.com

Frequently asked questions

What is CVE-2026-76673?: CVE-2026-76673 is a critical-severity vulnerability. CVSS score: 9.8/10. Published 2026-09-15.
How severe is CVE-2026-76673?: Critical severity. CVSS v3 base score is 9.8 out of 10.